Discussion Feed

Question   What is the best way to setup Alerts for App Agent Status and Machine Agent Status.     When the Agent is turned off  the Agent Status stops reporting any values so what is the best approach for setting up a Health Rule?    Answer Solution 1 The machine agent posts a metric you can use:   Application Infrastructure Performance|FrontEnd|Agent| Machine|Availability   Solution 2 You can also use the App Agent Status for app agent availability. But note in addition to the app pool recycles that take place by default every 29 hours, there is also an app pool idle time out that occurs if there’s no traffic on the app after 20 minutes. If that idle occurs, then the agent will be unloaded will no longer report and trigger this alert and look like a false alert (App|Availability = 0). You can address this by turning that setting off by setting timeout value to 0.     You can read about this here under the section Idle Time Out. ... View more

As of 4.0, license usage data can be viewed  in the license screen from the controller UI. See License Information for details.   SaaS users can view license usage information from their account subscription page on www.appdynamics.com.     The subscription page shows shows data for the current month with the most used product first. For each product area, the X-axis represents time in hours and Y-axis represents the units used for that area. For example, for APM it shows the agent license units used, for Transaction Analytics it shows BT events, for Mobile EUM active users, and so on.        By hovering over the graph, you can see how much is used for that hour of the day.  For APM products with either fixed or overage models (except variable model), an additional line is shown, which represents the number of units provisioned.     ... View more

Issue Java agent is unable to connect to the controller due to a certificate chaining error. This might be seen with IBM WebSphere.    Errors similar to the following:   [AD Thread Pool-Global0] 10 Jun 2015 20:12:52,848 WARN XMLConfigManager - Certificate chain validation failed com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: java.security.cert.CertPathValidatorException: The certificate issued by CN=DigiCert Global Root CA, OU= www.digicert.com<http://www.digicert.com >, O=DigiCert Inc, C=US is not trusted; internal cause is: java.security.cert.CertPathValidatorException: Certificate chaining error attempting validation. [AD Thread Pool-Global0] 10 Jun 2015 20:12:52,849 ERROR ConfigurationChannel - Fatal transport error: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: java.security.cert.CertPathValidatorException: The certificate issued by CN=DigiCert Global Root CA, OU= www.digicert.com<http://www.digicert.com >, O=DigiCert Inc, C=US is not trusted; internal cause is: java.security.cert.CertPathValidatorException: Certificate chaining error [AD Thread Pool-Global0] 10 Jun 2015 20:12:52,849 WARN ConfigurationChannel - Could not connect to the controller/invalid response from controller, cannot get initialization information, controller host [stelo.saas.appdynamics.com< http://stelo.saas.appdynamics.com> ], port[443], exception [Fatal transport error: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: java.security.cert.CertPathValidatorException: The certificate issued by CN=DigiCert Global Root CA, OU= www.digicert.com<http://www.digicert.com >, O=DigiCert Inc, C=US is not trusted; internal cause is: java.security.cert.CertPathValidatorException: Certificate chaining error]   Solution   The java agent is using the IBM JVM's jre/lib/security/cacerts file to validate the controller's certificate. There are two ways to solve this problem: 1.) Use keytool to import the root of your controller's certificate chain, (the FTB CA's root cert), into jre/lib/security/cacerts 2.) Start your application with following JVM arguments: -Djavax.net.ssl.trustStore=/path/to/FTB_custom_trustStore.jks -Djavax.net.ssl.trustStorePassword=somepassword and make sure FTB_custom_trustStore.jks contains the FTB Certificate Authority root cert.   ... View more

Question Does the  JavaScript agent for EUEM (adrum.js) always need to be placed in the header of the web page? Won't this potentially cause latency and load delays in loading the web page? Answer Our Engineering team has gone to great lengths to ensure that the initial adrum.js is very lightweight.    Additionally, the loading of adrum.js is synchronous and minimal filesize to prevent page loading interruptions.  It calls out to the extension script, adrum-ext.js, asynchronously to allow rest of the page to load.   For most modern browsers, it does not matter where you copy adrum.js file on the page because they support navigation timing, which is what we use for the timings. So loading in the body for them is ok.   If you care about accurate timing for older browsers, mostly older IE and Safari, then you need to load the tag as early possible so the fall back timer can be started.    Using the adrum-start-time property gets us around the timing issues with older browsers. Place this JS snippet in the page's <head> and then place adrum.js at the bottom like so window["adrum-start-time"] = new Date().getTime(); More code examples here.   IE browsers tips: adrum.js loading placement in relation to <meta> tags definitely impacts pre-IE 9 browsers, therefore the recommended location for adrum.js is AFTER any <meta> tags With older browsers, load adrum.js as early as possible to avoid missing resource timing data Intranet settings in IE can prevent the JS agent from functioning properly   Browsers that support the navigation timing API can be found here: Browser Support for Navigation Timing API.   ... View more

Symptoms While trying to enable the End User Experience in the controller it returns an error similar to the following:   EUM license usage retrieval failed (Error fetching license usage information [org.apache.http.conn.HttpHostConnectException   For example, in an environment using the AppDynamics SaaS EUM the full error might read: EUM license usage retrieval failed (Error fetching license usage information [org.apache.http.conn.HttpHostConnectException: Connect to agg.eum-appdynamics.com:443 [agg.eum-appdynamics.com/52.10.146.82, agg.eum-appdynamics.com/54.186.213.46, agg.eum-appdynamics.com/54.148.146.12, agg.eum-appdynamics.com/54.191.252.35, agg.eum-appdynamics.com/54.213.8.211, agg.eum-appdynamics.com/54.69.27.161] failed: Connection refused while calling 'https://agg.eum-appdynamics.com/eumaggregator/licenseUsage'] )   Diagnosis To use EUM you must have port 443 open on the controller machine so the Controller can access the EUM cloud to collect EUM metrics. The EUM cloud can be the AppDynamics Cloud or your own if you have set up an on-premise EUM Server.   For  EUM in  AppDynamics Cloud Environment The Controller needs to access agg.eum-appdynamics.com through internet using HTTP over SSL on port :443.   For On-Premises EUM, the URL agg.eum-appdynamics.com will be different, but the issue is the same. Make sure port 443 is open.     Solution Confirm that port 443 is open and is not blocked by a firewall.   If you have a proxy in between the controller and your EUM cloud, configure the proxy as described in the following doc: Configure On-Prem Controller HTTP Proxy Settings.   Related documenation: Install and+Configure the On-Premise EUM Server. ... View more